Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
File:                     2MHMikY6MVDL7AhlTmF4ANZuU-k.mft (raw, json)
Hash identifier:          FwiFocG+drr47z7D5ur9WUj/CctCivflghzHt3nZrE8=
Subject key identifier:   C2:81:20:0D:2C:57:6B:58:36:E2:67:93:D3:F4:95:4B:6A:04:4D:A3
Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
Certificate issuer:       /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Certificate serial:       070E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
Manifest number:          06FC
Signing time:             Mon 02 Mar 2026 00:46:07 +0000
Manifest this update:     Mon 02 Mar 2026 00:46:06 +0000
Manifest next update:     Mon 09 Mar 2026 00:46:06 +0000
Files and hashes:         1: 2MHMikY6MVDL7AhlTmF4ANZuU-k.crl (hash: BS08LJ+OEW+gvp3WZK4hvyEydvZ/Q3tothywCrp+eEE=)
                          2: 88A31320809211EB938F4016C4F9AE02.roa (hash: hQTt0AFzBYtxdeGsE5h3TYl3htX01dC5soXQmdrd9Fo=)
                          3: F00A66308A9C11EB9B2E044BC4F9AE02.roa (hash: rQHi52MocQB/prtSJtGO8uedEqwHLU7/+mRUSwiw+1Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
                          rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1806 (0x70e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
        Validity
            Not Before: Mar  2 00:46:06 2026 GMT
            Not After : Mar  9 00:46:06 2026 GMT
        Subject: CN=69a4ddcf-82df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:94:dd:b9:82:f1:a2:c1:aa:0c:0f:06:18:2c:
                    7d:b2:48:bc:b6:60:50:fc:76:7f:b9:15:0a:5c:fc:
                    5d:f9:63:18:46:b4:8b:1a:e7:1e:96:f1:ae:61:ec:
                    cd:97:0c:c3:ea:3a:43:83:4c:3e:0e:e8:c8:f8:77:
                    78:6c:12:71:52:a8:57:ff:ca:59:02:24:6e:3b:a2:
                    c1:f6:3a:6b:46:8e:33:94:b1:a2:e7:95:b6:d6:4c:
                    cd:5b:3f:0b:89:44:54:b5:fa:2d:05:e8:2b:8e:a8:
                    8b:8a:10:83:6b:33:92:62:85:08:39:8d:e8:43:37:
                    00:d4:1c:ac:43:2d:51:ad:ce:54:66:d4:2a:85:a9:
                    02:3c:2a:fb:87:ce:6c:8c:80:6b:f5:f6:16:8a:ae:
                    40:80:29:59:38:c7:86:72:1f:2d:be:81:27:a9:c8:
                    46:b2:79:67:1c:0a:bb:e4:da:79:27:49:e0:d8:65:
                    1d:af:7b:c8:57:9f:10:81:96:2d:12:c1:bd:36:48:
                    08:da:4b:26:6e:35:5e:6c:b6:c2:e4:2c:c5:ff:90:
                    ce:24:96:6f:cb:d1:1b:e7:2c:52:1d:28:90:e7:80:
                    dc:19:e7:f7:85:2f:fd:82:ca:f1:02:7f:8e:59:a7:
                    72:39:0f:4d:fd:bc:1b:9f:fd:40:7c:0a:46:75:6e:
                    70:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:81:20:0D:2C:57:6B:58:36:E2:67:93:D3:F4:95:4B:6A:04:4D:A3
            X509v3 Authority Key Identifier:
                keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:2c:1b:64:b2:d6:65:b4:7b:67:12:6d:87:ee:6e:2f:b5:ad:
         90:63:81:1a:2e:0f:3d:49:95:77:5d:ca:74:b0:2f:c8:2c:6b:
         f3:54:b3:e4:a1:15:c6:06:3f:8c:85:92:72:52:27:8d:92:c8:
         d5:ed:54:57:9c:6f:9d:93:b6:09:c6:8b:5d:de:46:f1:7b:7e:
         e7:cb:ad:15:44:c7:53:91:7a:52:92:4e:25:c2:d4:ca:aa:85:
         9c:6e:17:c9:ad:ec:3f:8b:dd:43:45:b8:98:ef:80:9d:6f:4e:
         6f:68:d2:fa:25:c9:d5:cb:26:23:ea:c5:e4:62:a8:99:5a:a9:
         10:cd:85:55:70:3e:e6:b1:a3:1a:c7:08:e6:eb:e5:8c:59:c9:
         a0:2e:a9:70:d5:b1:f4:3a:0b:bc:4c:c9:4e:d5:ec:c5:6d:85:
         d1:69:b2:6a:bb:cd:a4:c4:70:64:e3:71:5a:0e:8e:4a:63:13:
         69:0c:c5:b3:1d:71:fd:22:06:ec:ef:51:3a:a6:2f:3a:6b:b4:
         ec:49:f8:6b:c6:9e:b7:c4:e0:34:c5:a3:8b:f6:09:95:df:83:
         1d:a7:70:e4:06:a6:c4:a1:4b:e7:77:9e:8f:0c:95:a1:92:e0:
         64:d9:7e:00:e7:be:2a:1a:db:d6:7d:fa:41:59:42:28:a0:c6:
         bd:47:2d:bc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5QzExMTAvBgNVBAUTKEQ4QzFDQzhBNDYzQTMxNTBDQkVDMDg2NTRFNjE3ODAw
RDY2RTUzRTkwHhcNMjYwMzAyMDA0NjA2WhcNMjYwMzA5MDA0NjA2WjAYMRYwFAYD
VQQDEw02OWE0ZGRjZi04MmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjJTduYLxosGqDA8GGCx9ski8tmBQ/HZ/uRUKXPxd+WMYRrSLGucelvGuYezN
lwzD6jpDg0w+DujI+Hd4bBJxUqhX/8pZAiRuO6LB9jprRo4zlLGi55W21kzNWz8L
iURUtfotBegrjqiLihCDazOSYoUIOY3oQzcA1BysQy1Rrc5UZtQqhakCPCr7h85s
jIBr9fYWiq5AgClZOMeGch8tvoEnqchGsnlnHAq75Np5J0ng2GUdr3vIV58QgZYt
EsG9NkgI2ksmbjVebLbC5CzF/5DOJJZvy9Eb5yxSHSiQ54DcGef3hS/9gsrxAn+O
WadyOQ9N/bwbn/1AfApGdW5wQQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMKBIA0s
V2tYNuJnk9P0lUtqBE2jMB8GA1UdIwQYMBaAFNjBzIpGOjFQy+wIZU5heADWblPp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8wQTNGMjY5Qzgw
ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1WREw3QWhsVG1GNEFOWnVV
LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzJNSE1pa1k2TVZETDdBaGxUbUY0QU5adVUtay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
ODlDMS8wQTNGMjY5QzgwODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1W
REw3QWhsVG1GNEFOWnVVLWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAOywbZLLWZbR7ZxJth+5uL7WtkGOBGi4PPUmVd13KdLAvyCxr81Sz5KEVxgY/
jIWSclInjZLI1e1UV5xvnZO2CcaLXd5G8Xt+58utFUTHU5F6UpJOJcLUyqqFnG4X
ya3sP4vdQ0W4mO+AnW9Ob2jS+iXJ1csmI+rF5GKomVqpEM2FVXA+5rGjGscI5uvl
jFnJoC6pcNWx9DoLvEzJTtXsxW2F0WmyarvNpMRwZONxWg6OSmMTaQzFsx1x/SIG
7O9ROqYvOmu07En4a8aet8TgNMWji/YJld+DHadw5AamxKFL53eejwyVoZLgZNl+
AOe+Khrb1n36QVlCKKDGvUctvA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:34 2026 by rpki-client